Alerts This Week
Warning Icon 1 700
Alerts This Week
Warning Icon 1 700

openSUSE Leap 42.3: SUSE-SU-2019:0052-1 Important: Mutt Fixes

opensuse
Calendar Grey January 17, 2019
Dist Opensuse Esm H88
A crucial patch for mutt in Fedora has resolved 16 vulnerabilities, providing major enhancements that are now ready for implementation.
An update that solves 16 vulnerabilities and has 6 fixes is now available.

Description

This update for mutt fixes the following issues:

Security issues fixed:

- bsc#1101428: Mutt 1.10.1 security release update.

- CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status

mailbox literal count size (bsc#1101583).

- CVE-2018-14353: Fix imap_quote_string in imap/util.c that has an integer

underflow (bsc#1101581).

- CVE-2018-14362: Fix pop.c that does not forbid characters that may have

unsafe interaction with message-cache pathnames (bsc#1101567).

- CVE-2018-14354: Fix arbitrary command execution from remote IMAP servers via backquote characters (bsc#1101578).

- CVE-2018-14352: Fix imap_quote_string in imap/util.c that does not leave

room for quote characters (bsc#1101582).

- CVE-2018-14356: Fix pop.c that mishandles a zero-length UID

(bsc#1101576).

- CVE-2018-14355: Fix imap/util.c that mishandles ".." directory traversal

in a mailbox name (bsc#1101577).

- CVE-2018-14349: Fix imap/command.c...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory buffer overflow command execution important mutt openSUSE IMAP issue

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 42.3:

zypper in -t patch openSUSE-2019-52=1

Package List

- openSUSE Leap 42.3 (noarch):

mutt-doc-1.10.1-2.5.1

mutt-lang-1.10.1-2.5.1

- openSUSE Leap 42.3 (x86_64):

mutt-1.10.1-2.5.1

mutt-debuginfo-1.10.1-2.5.1

mutt-debugsource-1.10.1-2.5.1

References

https://www.suse.com/security/cve/CVE-2014-9116.html

https://www.suse.com/security/cve/CVE-2018-14349.html

https://www.suse.com/security/cve/CVE-2018-14350.html

https://www.suse.com/security/cve/CVE-2018-14351.html

https://www.suse.com/security/cve/CVE-2018-14352.html

https://www.suse.com/security/cve/CVE-2018-14353.html

https://www.suse.com/security/cve/CVE-2018-14354.html

https://www.suse.com/security/cve/CVE-2018-14355.html

https://www.suse.com/security/cve/CVE-2018-14356.html

https://www.suse.com/security/cve/CVE-2018-14357.html

https://www.suse.com/security/cve/CVE-2018-14358.html

https://www.suse.com/security/cve/CVE-2018-14359.html

https://www.suse.com/security/cve/CVE-2018-14360.html

https://www.suse.com/security/cve/CVE-2018-14361.html

https://www.suse.com/security/cve/CVE-2018-14362.html

https://www.suse.com/security/cve/CVE-2018-14363.html

https://bugzilla.suse.com/1061343

https://bugzilla.suse.com/1094717

https://bugzilla.suse.com/1101428

https://bugzilla.suse.com/1101566

https://bugzilla.suse...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2019:0052-1
Rating: important
Affected Products: openSUSE Leap 42.3 le.

Topics%20covered

Topics Covered

security advisory buffer overflow command execution important mutt openSUSE IMAP issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here